@ouro.bot/friends 0.1.0-alpha.4 → 0.1.0-alpha.5

package/dist/store-file.js

@@ -190,30 +190,43 @@ class FileFriendStore {
         const meta = raw;
         if (typeof meta.bundleName !== "string")
             return undefined;
+        // Mailbox is top-level on AgentMeta since the phase-8 demote. Read the
+        // top-level `meta.mailbox` first; if absent, MIGRATE-ON-READ from a legacy
+        // alpha.4 record that nested it under `a2a.mailbox`. schemaVersion stays 1;
+        // every legacy record reads clean.
+        const a2aRaw = meta.a2a && typeof meta.a2a === "object" && !Array.isArray(meta.a2a)
+            ? meta.a2a
+            : undefined;
+        const mailbox = this.normalizeMailbox(meta.mailbox) ??
+            (a2aRaw ? this.normalizeMailbox(a2aRaw.mailbox) : undefined);
+        const a2a = this.normalizeA2AMeta(meta.a2a);
         return {
             bundleName: meta.bundleName,
             familiarity: typeof meta.familiarity === "number" ? meta.familiarity : 0,
             sharedMissions: Array.isArray(meta.sharedMissions) ? meta.sharedMissions : [],
             outcomes: Array.isArray(meta.outcomes) ? meta.outcomes : [],
-            ...(this.normalizeA2AMeta(meta.a2a) ? { a2a: this.normalizeA2AMeta(meta.a2a) } : {}),
+            ...(a2a ? { a2a } : {}),
+            ...(mailbox ? { mailbox } : {}),
         };
     }
     normalizeA2AMeta(raw) {
         if (!raw || typeof raw !== "object" || Array.isArray(raw))
             return undefined;
         const meta = raw;
-        const mailbox = this.normalizeMailbox(meta.mailbox);
+        const relay = this.normalizeRelay(meta.relay);
         const a2a = {
             ...(typeof meta.cardUrl === "string" ? { cardUrl: meta.cardUrl } : {}),
             ...(typeof meta.endpointUrl === "string" ? { endpointUrl: meta.endpointUrl } : {}),
             ...(typeof meta.agentId === "string" ? { agentId: meta.agentId } : {}),
             ...(typeof meta.protocolVersion === "string" ? { protocolVersion: meta.protocolVersion } : {}),
-            ...(mailbox ? { mailbox } : {}),
+            ...(relay ? { relay } : {}),
+            ...(typeof meta.did === "string" ? { did: meta.did } : {}),
         };
         return Object.keys(a2a).length > 0 ? a2a : undefined;
     }
-    /** Preserve an additive a2a.mailbox coord only when both fields are strings;
-     * otherwise drop it (absent ⇒ unchanged — the additive guarantee). */
+    /** Preserve the top-level mailbox coord only when both fields are strings;
+     * otherwise drop it (absent ⇒ unchanged — the additive guarantee). Also used to
+     * migrate a legacy nested `a2a.mailbox`. */
     normalizeMailbox(raw) {
         if (!raw || typeof raw !== "object" || Array.isArray(raw))
             return undefined;
@@ -222,6 +235,16 @@ class FileFriendStore {
             return undefined;
         return { repo: m.repo, selfOutboxAgentId: m.selfOutboxAgentId };
     }
+    /** Preserve an additive a2a.relay coord only when both fields are strings;
+     * otherwise drop it (absent ⇒ unchanged — the additive guarantee). */
+    normalizeRelay(raw) {
+        if (!raw || typeof raw !== "object" || Array.isArray(raw))
+            return undefined;
+        const r = raw;
+        if (typeof r.url !== "string" || typeof r.handle !== "string")
+            return undefined;
+        return { url: r.url, handle: r.handle };
+    }
     async readJson(filePath) {
         try {
             const raw = await fsPromises.readFile(filePath, "utf-8");

package/dist/types.d.ts

@@ -113,14 +113,29 @@ export interface AgentMeta {
         endpointUrl?: string;
         agentId?: string;
         protocolVersion?: string;
-        /** Optional A2A git-mailbox coordinates (brick two). The mailbox is a
-         * dedicated PRIVATE repo holding only in-flight envelopes; `selfOutboxAgentId`
-         * is the dir THIS peer writes its outbox under. Absent on records that don't
-         * use the git-mailbox transport. */
-        mailbox?: {
-            repo: string;
-            selfOutboxAgentId: string;
+        /** Optional friends-relay coordinates (phase 8). When a peer has no directly
+         * reachable A2A `endpointUrl`, the host delivers via the UNTRUSTED relay at
+         * `url`, addressing the peer by its opaque `handle`. The relay carries only
+         * ciphertext (the E2E sign-then-seal overlay) — it never sees content. Absent
+         * on peers reachable directly or only via the git-mailbox fallback. */
+        relay?: {
+            url: string;
+            handle: string;
         };
+        /** The peer's pinned DID (phase 8 — `did:key:…` or `did:web:…`). `agentId ===
+         * did` (the DID is the cross-agent identity primary key); pinned on first
+         * contact (TOFU) and verified on every use thereafter. Absent until the peer
+         * presents a DID-bearing proof. */
+        did?: string;
+    };
+    /** Optional git-mailbox FALLBACK coordinates (the demoted no-endpoint transport;
+     * see src/mailbox/). The mailbox is a dedicated PRIVATE repo holding only
+     * in-flight envelopes; `selfOutboxAgentId` is the dir THIS peer writes its outbox
+     * under. Top-level since phase 8's demote (was nested under `a2a` in alpha.4 —
+     * legacy records migrate-on-read). Absent on peers that don't use the fallback. */
+    mailbox?: {
+        repo: string;
+        selfOutboxAgentId: string;
     };
 }
 export interface FriendRecord {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/friends",
-  "version": "0.1.0-alpha.4",
+  "version": "0.1.0-alpha.5",
   "description": "The who's-who / identity / relationship substrate for agents — trust ladder (family/friend/acquaintance/stranger), multi-party and multi-agent, consumed via the FriendStore interface + FriendResolver.",
   "license": "Apache-2.0",
   "main": "dist/index.js",
@@ -14,9 +14,13 @@
       "types": "./dist/mcp/index.d.ts",
       "default": "./dist/mcp/index.js"
     },
-    "./a2a": {
-      "types": "./dist/a2a/index.d.ts",
-      "default": "./dist/a2a/index.js"
+    "./mailbox": {
+      "types": "./dist/mailbox/index.d.ts",
+      "default": "./dist/mailbox/index.js"
+    },
+    "./a2a-client": {
+      "types": "./dist/a2a-client/index.d.ts",
+      "default": "./dist/a2a-client/index.js"
     }
   },
   "bin": {
@@ -29,6 +33,7 @@
   "type": "commonjs",
   "scripts": {
     "build": "tsc",
+    "postbuild": "node -e \"require('fs').chmodSync('dist/mcp/bin.js', 0o755)\"",
     "prepare": "npm run build",
     "pretest": "npm run build",
     "pretest:coverage": "npm run build",
@@ -37,10 +42,11 @@
     "lint": "eslint src/",
     "typecheck": "tsc --noEmit",
     "example:cross-agent-moat": "npm run build && tsx examples/cross-agent-moat.ts",
-    "example:a2a-git-mailbox": "npm run build && tsx examples/a2a-git-mailbox.ts",
+    "example:mailbox-fallback": "npm run build && tsx examples/mailbox-fallback.ts",
     "example:cross-agent-mission-memory": "npm run build && tsx examples/cross-agent-mission-memory.ts",
     "example:cross-agent-standing": "npm run build && tsx examples/cross-agent-standing.ts",
     "example:cross-agent-coordination": "npm run build && tsx examples/cross-agent-coordination.ts",
+    "example:cross-agent-a2a-relay": "npm run build && tsx examples/cross-agent-a2a-relay.ts",
     "release:bump": "node scripts/release-bump.cjs",
     "release:preflight": "node scripts/release-preflight.cjs",
     "release:trust:check": "node scripts/npm-trusted-publishers.cjs check",
@@ -54,8 +60,11 @@
   "publishConfig": {
     "access": "public"
   },
-  "dependencies": {},
+  "dependencies": {
+    "libsodium-wrappers": "0.8.4"
+  },
   "devDependencies": {
+    "@types/libsodium-wrappers": "0.8.2",
     "@types/node": "^22.0.0",
     "@vitest/coverage-v8": "^4.1.8",
     "eslint": "^10.0.2",